OWASP Cork

OWASP Cork

Welcome to the Cork chapter landing page.

The chapter board is:

Follow chapter news on Twitter Meetup.com Facebook

Next Meeting

Tuesday, 4th Febuary 2020

Meetup Registration: Everyone is welcome to join us at our chapter meetings, please RSVP via our Meetup Page

Location: Dell Technologies, City Gate, Mahon, Cork.

Time: Doors Open at 6pm for registration, pizza, drinks and networking, the talks start at 6:30pm (we start on time).

Talk:

  • Security at a Startup
    • Joe Lennon
    • CTO & Co-founder, Workvivo.
  • Industrial Control System Simulation: How to build your own DIY ICS platform
    • Thomas Roccia
    • Security Researcher, McAfee Advanced Threat Research.

Speaking at OWASP Cork Chapter Events

Call For Speakers

Call For Speakers is always open, if you would like to present a talk on Application Security or Security in general we would be delighted to organise the event. Please review and agree with the OWASP Speaker Agreement and send the proposed talk title, abstract and speaker bio to the Chapter Leaders via e-mail.


Past Events here:

Thursday, 28th November 2019

Location: Dell Technologies, City Gate, Mahon, Cork.

Time: Doors Open at 6pm for registration, pizza, drinks and networking, the talks start at 6:30pm (we start on time).

Talk:

  • Multi Factor Authentication the false narrative
    • Darragh Duffy & John O’Riordan
    • Darragh is a Senior Principal Security Engineer, Dell Technologies
    • John is a Staff Cyber Security Engineer, Qualcomm
  • An Insider’s Guide to Hacking Your Network
    • Mark O’Sullivan
    • Penetration Testing, Cyber Risk, Deloitte

Multi Factor Authentication the false narrative

John and Darragh will talk about some of the miss conceptions with 2FA/2SV/MFA as the perfect mechanism to protect our identities. They will discuss some of these additional authentication factor mechanisms (SMS tokens, One Time Passcodes etc.) and if they are really a second factor. They will highlight the major weakness with how we perceive and use 2FA/MFA mechanisms. They will demonstrate how you can exploit this weakness, bypassing the protection we believe 2FA/MFA offers us. They will finish up by introducing the current solution to this MFA weakness, FIDO2, which is a true MFA mechanism but not yet widely adopted.

Demo Videos

An Insider’s Guide to Hacking Your Network

Mark has significant experience in cyber security and holds industry leading security testing certificates including the OSCP. He has a keen interest in all areas of cyber security, and has specialised in penetration testing and vulnerability management. Mark has managed and conducted a wide range of penetration tests against a diverse range of platforms including web, mobile, network and IoT.